| Index | index by Group | index by Distribution | index by Vendor | index by creation date | index by Name | Mirrors | Help | Search |
| Name: bind9.18-dnssec-utils | Distribution: AlmaLinux |
| Version: 9.18.29 | Vendor: AlmaLinux |
| Release: 14.el9_8.12 | Build date: Sat Oct 31 07:44:49 2026 |
| Group: Unspecified | Build host: arm64-builder01.almalinux.org |
| Size: 715122 | Source RPM: bind9.18-9.18.29-14.el9_8.12.src.rpm |
| Packager: AlmaLinux Packaging Team <packager@almalinux.org> | |
| Url: https://www.isc.org/downloads/bind/ | |
| Summary: DNSSEC keys and zones management utilities | |
bind9.18-dnssec-utils contains a collection of utilities for editing DNSSEC keys and BIND zone files. These tools provide generation, revocation and verification of keys and DNSSEC signatures in zone files. You should install bind9.18-dnssec-utils if you need to sign a DNS zone or maintain keys for it.
MPL-2.0 AND ISC AND MIT AND BSD-3-Clause AND BSD-2-Clause
* Thu Oct 22 2026 Petr Menšík <pemensik@redhat.com> - 32:9.18.29-14.12
- Prevent arbitrary code execution via GSS-TSIG UDP message replay
(CVE-2026-94300)
- Fix Denial of service via assertion failure in RPZ query processing (CVE-2026-97313)
- Prevent Denial of Service via assertion failure during redirect processing
(CVE-2026-96888)
- Prevent Denial of Service via unbounded processing of crafted DNS messages
(CVE-2026-19630)
* Fri Oct 16 2026 Fedor Vorobev <fvorobev@redhat.com> - 32:9.18.29-14.11
- Fix CVE-2026-19662: NOQNAME proof use-after-free could crash recursive resolver.
* Thu Sep 17 2026 Petr Menšík <pemensik@redhat.com> - 32:9.18.29-14.10
- Prevent assertion failure in dns64 mode with break-dnssec yes (CVE-2026-19666)
- Prevent memory leak on following HTTPS/SVCB RR (CVE-2026-81563)
- Prevent crash on wildcard responses containing both NSEC and NSEC3 proofs (CVE-2026-80274)
- Reject oversized negative cached records early (CVE-2026-19667)
- Set limit to following HTTPS/SVCB aliases (CVE-2026-81736)
* Wed Sep 02 2026 Petr Menšík <pemensik@redhat.com> - 32:9.18.29-14.9
- Add new root key 38696 into package files (RHEL-255223)
- Update built-in anchors in delv and named
* Sat Jul 25 2026 RHEL Packaging Agent <redhat-ymir-agent@redhat.com> - 32:9.18.29-14.8
- Fix NSEC3 signer validation (CVE-2026-10723, RHEL-215704)
* Fri Jul 24 2026 RHEL Packaging Agent <redhat-ymir-agent@redhat.com> - 32:9.18.29-14.7
- Reject out-of-zone NSEC next owner names (CVE-2026-13321,
RHEL-213314)
* Thu Jul 23 2026 RHEL Packaging Agent <redhat-ymir-agent@redhat.com> - 32:9.18.29-14.6
- Fix cache exhaustion via dns_slabheaders (CVE-2026-11622,
RHEL-213389)
* Thu Jul 23 2026 RHEL Packaging Agent <redhat-ymir-agent@redhat.com> - 32:9.18.29-14.5
- Reject invalid signed wildcard records (CVE-2026-11721,
RHEL-213417)
* Thu Jul 23 2026 RHEL Packaging Agent <redhat-ymir-agent@redhat.com> - 32:9.18.29-14.4
- Fix RPZ wildcard expansion self-referential CNAME
(CVE-2026-11331, RHEL-213495)
* Thu Jul 23 2026 RHEL Packaging Agent <redhat-ymir-agent@redhat.com> - 32:9.18.29-14.3
- Fix assertion crash via unsigned NSEC/NSEC3 (CVE-2026-13204,
RHEL-213495)
* Mon May 25 2026 Petr Menšík <pemensik@redhat.com> - 32:9.18.29-14.2
- Fix GSS-API resource leak (CVE-2026-3039)
- Invalid handling of CLASS != IN (CVE-2026-5946)
* Wed Apr 01 2026 Petr Menšík <pemensik@redhat.com> - 32:9.18.29-14.1
- Correct backport issue in the patch (CVE-2026-1519)
* Fri Mar 27 2026 Petr Menšík <pemensik@redhat.com> - 32:9.18.29-14
- Prevent Denial of Service via maliciously crafted DNSSEC-validated zone
(CVE-2026-1519)
* Thu Jan 29 2026 Petr Menšík <pemensik@redhat.com> - 32:9.18.29-13
- Correct changelog version of previous change
* Wed Jan 28 2026 Petr Menšík <pemensik@redhat.com> - 32:9.18.29-12
- Add forgotten _libdir/named into bind-chroot tmpfiles (RHEL-132053)
* Fri Dec 12 2025 Petr Menšík <pemensik@redhat.com> - 32:9.18.29-11
- Add sysusers named user creation (RHEL-132053)
* Fri Dec 12 2025 Petr Menšík <pemensik@redhat.com> - 32:9.18.29-10
- Add missing bind-chroot subdirectories
* Fri Dec 12 2025 Petr Menšík <pemensik@redhat.com> - 32:9.18.29-9
- Create /var/named directories for bind-chroot (RHEL-132053)
* Fri Oct 31 2025 Petr Menšík <pemensik@redhat.com> - 32:9.18.29-8
- Copy named.* files from /usr/share/named into var/named
* Fri Oct 31 2025 Petr Menšík <pemensik@redhat.com> - 32:9.18.29-7
- Fix upstream reported regression in recent CVE fix (CVE-2025-8677)
- Add upstream created test to this regression
* Thu Oct 23 2025 Petr Menšík <pemensik@redhat.com> - 32:9.18.29-6
- Refuse malformed DNSKEY records (CVE-2025-8677)
- Address various spoofing attacks (CVE-2025-40778)
- Prevent cache poisoning due to weak PRNG (CVE-2025-40780)
* Fri Sep 12 2025 Petr Menšík <pemensik@redhat.com> - 32:9.18.29-5
- logrotate: skip if empty and remove old variants (RHEL-113942)
* Tue Jun 10 2025 Petr Mensik <pemensik@redhat.com> - 32:9.18.29-4
- Prevent name.c:670 attributes assertion failed (RHEL-30407)
- Add extra checks for relative names
* Mon Feb 03 2025 Petr Menšík <pemensik@redhat.com> - 32:9.18.29-3
- Limit additional section records CPU processing (CVE-2024-11187)
- Read HTTPS requests in limited chunks and prevent overload (CVE-2024-12705)
* Mon Jan 27 2025 Petr Menšík <pemensik@redhat.com> - 32:9.18.29-2
- Backport nsupdate TLS support into 9.18 (RHEL-76331)
- Update nsupdate manual about new TLS options
- Test nsupdate TLS support
/usr/bin/dnssec-cds /usr/bin/dnssec-dsfromkey /usr/bin/dnssec-importkey /usr/bin/dnssec-keyfromlabel /usr/bin/dnssec-keygen /usr/bin/dnssec-revoke /usr/bin/dnssec-settime /usr/bin/dnssec-signzone /usr/bin/dnssec-verify /usr/lib/.build-id /usr/lib/.build-id/0a /usr/lib/.build-id/0a/ec2ccbe1b13434d7689960f7f4027f2db93d60 /usr/lib/.build-id/0d /usr/lib/.build-id/0d/e9070805c32f1cf61defe5437269fcd1c2f0a0 /usr/lib/.build-id/1b /usr/lib/.build-id/1b/a86f7c29356cdca1c5948525a0e887efb62d97 /usr/lib/.build-id/35 /usr/lib/.build-id/35/d702496cbf302b6a83855716159963115f3c62 /usr/lib/.build-id/3e /usr/lib/.build-id/3e/066bfaf1c549365c0f9faf5ba50d015288a8a2 /usr/lib/.build-id/45 /usr/lib/.build-id/45/46554712f03bdce12a0a75f0d948292d9e6458 /usr/lib/.build-id/78 /usr/lib/.build-id/78/889f22982a3948e8ab2208ae48402e452694b6 /usr/lib/.build-id/d2 /usr/lib/.build-id/d2/d273c8c8062214c1bc28ca0818a6468b794c16 /usr/lib/.build-id/eb /usr/lib/.build-id/eb/54b966dea45573b6d39d2d6062f4b26cb09fbe /usr/share/man/man1/dnssec-cds.1.gz /usr/share/man/man1/dnssec-dsfromkey.1.gz /usr/share/man/man1/dnssec-importkey.1.gz /usr/share/man/man1/dnssec-keyfromlabel.1.gz /usr/share/man/man1/dnssec-keygen.1.gz /usr/share/man/man1/dnssec-revoke.1.gz /usr/share/man/man1/dnssec-settime.1.gz /usr/share/man/man1/dnssec-signzone.1.gz /usr/share/man/man1/dnssec-verify.1.gz
Generated by rpm2html 1.8.1
Fabrice Bellet, Wed Nov 11 01:01:19 2026